A Djinn in the Machine: TaskWeaver's Node.js Intrusion Chain

https://www.securitricks.com/reports/a-djinn-in-the-machine-taskweavers-nodejs-intrusion-chain/